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DETAILED ACTION 

Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1.17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 

1 1/26/2008 has been entered. 

Response to Amendment 

2. In response to communications filed on 1 1/26/2008, the Examiner acknowledges 
the amendments made to the claims and have both considered and applied them to the 
claims. 

Claims 1-51 are presented for examination. 

Response to Remarks/Arguments 

3. Applicant's arguments with respect to the rejection of the claims have been fully 
considered but they are not persuasive. 

3.1 In response to Applicant argument that the Srivastava reference does not teach 
or suggest operating a third node which is coupled to said first and second nodes to 
maintain in memory a copy of said first shared secret; and operating the third node to 
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receive a secure flow of packets from the first node that are directed to said second 
node as part of the secure communications session, in addition to the previous citation 
the, Examiner respectfully disagrees citing column 5 lines 7-13, which recites, "multicast 
proxy service nodes" and column 7 lines 10-20, which recites, "multiple entities, which 
themselves communicate over a secure back channel ... the entities, which make up 
the distributed group controller nodes and use the back channel to communicate among 
each other, use various key exchange algorithms to securely communicate." The 
disclosure here of "multiple proxy service nodes" provides support for the obviousness- 
type 103(a) rejection indicated below for this and the other claim limitations. 

The basis/motivation for such modification is found in column 2 line 42-54 which 
recites - "scenario involves participants A and B, in which user A is considered a 
publisher of a message to a subscriber, user B," the disclosure of participants A and B 
communicating messages between each other is understood as providing motivation for 
claiming the "user A is considered a publisher of a message to a subscriber, user B," 
the benefit of such modification being increased processing speed and packet 
transmission/communication. Applicant has not overcome the rejection. 

3.2 In response to Applicant argument that the Srivastava reference does not teach 
or suggest packets communicated from the first node that are directed to the 
second node as part of the secure communications session, packets communicated 
from the first node that are directed to the second node being addressed to said second 
node by use of a second node destination address, the Examiner respectfully disagrees 



Application/Control Number: 10/685,720 
Art Unit: 2436 



Page 4 



maintaining the disclosure of column 2 lines 42-54, which recites, "scenario involves 
participants A and B, in which user A is considered a publisher of a message to a 
subscriber, user B," the disclosure of participants A and B communicating messages 
between each other is understood as providing motivation for claiming the "user A is 
considered a publisher of a message to a subscriber, user B," the benefit of such 
modification being increased processing speed and packet 

transmission/communication. The disclosure here of user B as a subscriber of user A 
provides added reason to understand user A to have a destination address of user B so 
as to be able to communicate messages to user B. Applicant has not overcome the 
rejection. 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-51 are rejected under 35 U.S.C. 103(a) as being unpatentable over Srivastava 
(US 6,684,331 B1) in view of Belani et al. (US Patent No. 6,167,513 hereinafter Belani) 

Regarding claims 1.19. 22. 34. 43 and 47 . Srivastava discloses a 
communications method for use in a system including comprising a first, second 
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and third nodes, and a first secret, said first secret being shared between the first 
and second nodes to secure communications between said first and second 
nodes (figure 1), the method comprising: operating the first node to establish a 
secure communications session with said second node using the first shared 
secret to secure the contents of packets communicated from the first node that 
are directed to the second node as part of the secure communications session 
(column 2 lines 27 - 41 ); operating a third node which is coupled to said first and 
second nodes to maintain in memory a copy of said first shared secret; and 
operating the third node to receive a secure flow of packets from the first node 
that are directed to said second node as part of the secure communications 
session (column 9 lines 38 - 49). 

Srivastava is silent in explicitly disclosing a first, second and third node, 
however Belani provides support for the obvious modification of the 
disclosed multicast proxy service nodes to read upon the claimed multiple 
(first, second and third) nodes. Belani discloses in column 8 lines 31-60, 
the recitation, "a DAG may be represented by G(N, E) having node "N" 
and directed edges "E." FIG. 5 depicts an exemplary DAG having three 
nodes n.sub.i, n.sub.j, and n.sub.k." 

It would have been obvious for one of ordinary skill in the art, at the time of 
the invention to have been motivated to modify the invention of Srivastava 
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with that of Belani. The basis/motivation for such modification is provided 
by Belani, which recites in column 1 lines 64-67 and column 2 lines 1-18, 
"Advances in communication network technologies coupled with the 
explosive growth in the usage of computer systems have significantly 
increased the number of resources available to users via communications 
networks. Due to the rising popularity of such communications networks, 
an increasing number of enterprises are replacing their legacy centralized 
information processing models with distributed systems comprising a 
plurality of computer systems interconnected via a communication 
network, such as the Internet." 

Further, Srivastava implicitly provides support for the obvious modification 
by means of the disclosure in column 5 lines 7-13, which recites, 
"multicast proxy service nodes" and column 7 lines 10-20, which recites, 
"multiple entities, which themselves communicate over a secure back 
channel ... the entities, which make up the distributed group controller 
nodes and use the back channel to communicate among each other, use 
various key exchange algorithms to securely communicate." The 
disclosure here of "multiple proxy service nodes" provides partial support 
for the obviousness-type 103(a) rejection indicated below for this and the 
other claim limitations. 
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Srivastava also does not explicitly disclose packets communicated from 
the first node that are directed to the second node being addressed to said 
second node by use of a second node destination address, however it 
would have been obvious for one of ordinary skill in the art, at the time of 
the invention to have been motivated to modify the invention of Srivastava 
to teach packet communication from the disclosure of first node being 
directed to the second node. The basis/motivation for such modification is 
found in column 2 line 42-54 which recites - "scenario involves 
participants A and B, in which user A is considered a publisher of a 
message to a subscriber, user B," the disclosure of participants A and B 
communicating messages between each other is understood as providing 
motivation for claiming the "user A is considered a publisher of a message 
to a subscriber, user B," the benefit of such modification being increased 
processing speed and packet transmission/communication. 

Regarding claims 2, 20, 35,45 and 50 , Srivastava discloses the method of claim 
1 , further comprising: operating the third node to receive from said second node 
the first shared secret and to store the first shared secret in memory, said 
received first shared secret being encrypted using a second shared secret known 
to the second and third nodes (column 12 lines 24 - 55). 
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Srivastava is silent in explicitly disclosing a first, second and third node, 
however Belani provides support for the obvious modification of the 
disclosed multicast proxy service nodes to read upon the claimed multiple 
(first, second and third) nodes. Belani discloses in column 8 lines 31-60, 
the recitation, "a DAG may be represented by G(N, E) having node "N" 
and directed edges "E." FIG. 5 depicts an exemplary DAG having three 
nodes n.sub.i, n.sub.j, and n.sub.k." 

It would have been obvious for one of ordinary skill in the art, at the time of 
the invention to have been motivated to modify the invention of Srivastava 
with that of Belani. The basis/motivation for such modification is provided 
by Belani, which recites in column 1 lines 64-67 and column 2 lines 1-18, 
"Advances in communication network technologies coupled with the 
explosive growth in the usage of computer systems have significantly 
increased the number of resources available to users via communications 
networks. Due to the rising popularity of such communications networks, 
an increasing number of enterprises are replacing their legacy centralized 
information processing models with distributed systems comprising a 
plurality of computer systems interconnected via a communication 
network, such as the Internet." 
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Further, Srivastava implicitly provides support for the obvious modification 
by means of the disclosure in column 5 lines 7-13, which recites, 
"multicast proxy service nodes" and column 7 lines 10-20, which recites, 
"multiple entities, which themselves communicate over a secure back 
channel ... the entities, which make up the distributed group controller 
nodes and use the back channel to communicate among each other, use 
various key exchange algorithms to securely communicate." The 
disclosure here of "multiple proxy service nodes" provides partial support 
for the obviousness-type 1 03(a) rejection indicated below for this and the 
other claim limitations. 



Regarding claims 3, 21 , 36, 46 and 51 , Srivastava discloses the method of claim 
2, further comprising: operating said third node to receive and process packets 
sent from said first node as part of said established communications session, 
said third node sending a message to the first node indicating successful receipt 
of packets by said second node (figure 4C and column 13 lines 63 - 67 and 
column 1 4 lines 1-17, column 1 0 lines 7-19). 



Regarding claims 4. 24, 37 , Srivastava discloses the method of claim 3, wherein 
said third node uses said first shared secret to secure the message to the first 
node (column 4 lines 4-17, column 9 lines 38 - 49). 
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Regarding claims 5, and 38 , Srivastava discloses the method of claim 5, wherein 
said third node operates as an application proxy for said second node during said 
secure communications session without informing said first node that the third 
node is acting as a proxy in the place of said second node (Figure 2C column 7 
lines 49 - 61 and column 8 lines 3-16 and column 10 lines 20-33). 

Srivastava is silent in explicitly disclosing a first, second and third node, 
however Belani provides support for the obvious modification of the 
disclosed multicast proxy service nodes to read upon the claimed multiple 
(first, second and third) nodes. Belani discloses in column 8 lines 31-60, 
the recitation, "a DAG may be represented by G(N, E) having node "N" 
and directed edges "E." FIG. 5 depicts an exemplary DAG having three 
nodes n.sub.i, n.sub.j, and n.sub.k." 

It would have been obvious for one of ordinary skill in the art, at the time of 
the invention to have been motivated to modify the invention of Srivastava 
with that of Belani. The basis/motivation for such modification is provided 
by Belani, which recites in column 1 lines 64-67 and column 2 lines 1-18, 
"Advances in communication network technologies coupled with the 
explosive growth in the usage of computer systems have significantly 
increased the number of resources available to users via communications 
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networks. Due to the rising popularity of such communications networks, 
an increasing number of enterprises are replacing their legacy centralized 
information processing models with distributed systems comprising a 
plurality of computer systems interconnected via a communication 
network, such as the Internet." 

Further, Srivastava implicitly provides support for the obvious modification 
by means of the disclosure in column 5 lines 7-13, which recites, 
"multicast proxy service nodes" and column 7 lines 10-20, which recites, 
"multiple entities, which themselves communicate over a secure back 
channel ... the entities, which make up the distributed group controller 
nodes and use the back channel to communicate among each other, use 
various key exchange algorithms to securely communicate." The 
disclosure here of "multiple proxy service nodes" provides partial support 
for the obviousness-type 103(a) rejection indicated below for this and the 
other claim limitations. 

Regarding claims 6, 26, 39 and 41 , Srivastava discloses the method of claim 5, 
further comprising: operating the third node to transmit information obtained from 
said communications session while said third node was acting as a proxy for said 
second node to said second node; and operating the second node to continue 
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the secure communications session with the first node (column 7 lines 49 - 61 
and column 8 lines 3-16, column 10 lines 20 - 33, column 12 lines 24 - 55). 

Regarding claims 7, 27 , Srivastava discloses the method of claim 1 , further 
comprising: operating the third node to inspect the secure packet flow from the 
first node, said step of inspecting said secure packet flow including performing at 
least one of a group of security steps which use the first shared secret, said 
group of security steps comprising: decrypting a packet, integrity checking 
contents of a packet, and authenticating a sender of a packet (Figure 3 and 
column 11 lines 34 -60). 

Regarding claims 8. 28 . Srivastava discloses the method of claim 7, further 
comprising: operating the third node to drop the packet from the packet flow if the 
performed at least one of the group of security checks fails (column 4 lines 4 - 
1 7, column 9 lines 38 - 49). 

Regarding claims 9, 29 , Srivastava discloses the method of claim 7, further 
comprising: operating the third node to additionally process the packets from the 
packet flow if no performed security check in said group of security checks fails 
(column 7 lines 49 - 61 Figure 2C and column 10 lines 20 - 33, and column 8 
lines 3- 16). 
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Regarding claims 10, 30 , Srivastava discloses the method of claim 9, further 
comprising: operating the third node to identify a packet with a disallowed packet 
payload by comparing at least a portion of the payload of each packet in the 
packet flow to information indicating allowed packet payloads, payloads of a type 
which are not indicated by said information being disallowed packet payloads 
(column 8 lines 1 7 - 60, column 1 1 lines 34 - 60). 

Regarding claims 1 1 , 31 , Srivastava discloses the method of claim 10, further 
comprising: operating the third node to drop an identified packet with a 
disallowed packet payload fails (Figure 3 and column 1 1 lines 34 - 60, column 4 
lines 4-17). 

Regarding claims 12, 32 , Srivastava discloses the method of claim 10, further 
comprising: operating the third node to modify the packet payload of packets 
identified to include a disallowed packet payload based on stored information 
indicating payload modifications to be made to disallowed packet payloads 
(column 4 lines 4-17, column 8 lines 17 - 60). 

Regarding claims 13 and 33 , Srivastava discloses the method of claim 12, 
wherein the modified payload generated by modifying a packet payload includes 
a message indicating that an erroneous payload was detected at the third node 
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(figure 4C and column 1 3 lines 63 - 67, column 7 lines 49 - 61 and column 8 
lines 3-16 and column 14 lines 1 - 17). 

Srivastava is silent in explicitly disclosing a first, second and third node, 
however Belani provides support for the obvious modification of the 
disclosed multicast proxy service nodes to read upon the claimed multiple 
(first, second and third) nodes. Belani discloses in column 8 lines 31-60, 
the recitation, "a DAG may be represented by G(N, E) having node "N" 
and directed edges "E." FIG. 5 depicts an exemplary DAG having three 
nodes n.sub.i, n.sub.j, and n.sub.k." 

It would have been obvious for one of ordinary skill in the art, at the time of 
the invention to have been motivated to modify the invention of Srivastava 
with that of Belani. The basis/motivation for such modification is provided 
by Belani, which recites in column 1 lines 64-67 and column 2 lines 1-18, 
"Advances in communication network technologies coupled with the 
explosive growth in the usage of computer systems have significantly 
increased the number of resources available to users via communications 
networks. Due to the rising popularity of such communications networks, 
an increasing number of enterprises are replacing their legacy centralized 
information processing models with distributed systems comprising a 
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plurality of computer systems interconnected via a communication 
network, such as the Internet." 

Further, Srivastava implicitly provides support for the obvious modification 
by means of the disclosure in column 5 lines 7-13, which recites, 
"multicast proxy service nodes" and column 7 lines 10-20, which recites, 
"multiple entities, which themselves communicate over a secure back 
channel ... the entities, which make up the distributed group controller 
nodes and use the back channel to communicate among each other, use 
various key exchange algorithms to securely communicate." The 
disclosure here of "multiple proxy service nodes" provides partial support 
for the obviousness-type 103(a) rejection indicated below for this and the 
other claim limitations. 



Regarding claim 14 , Srivastava discloses the method of claim 10, further 
comprising: operating the third node to process at least two packets in the packet 
flow to produce at least a third packet (column 4 lines 4-17). 

Regarding claim 15 . Srivastava discloses the method of claim 9, further 
comprising; operating the third node to generate an additional packet flow from 
the received packet flow directed to the second node and to forward the 
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additional packet flow to the second node, packets in said additional packet flow 
having a source address corresponding to the first node and a destination 
address corresponding to the second node, said step of generating an additional 
packet flow including at least one of a group of security steps which use the first 
shared secret, the group of security steps consisting of: encrypting a packet, 
adding an integrity check for the contents of the packet, and adding an 
authenticator check for the packet sender (column 7 lines 49 - 61 and column 8 
lines 3- 16). 

Regarding claim 16 , Srivastava discloses the method of claim 1 , wherein the 
second and third nodes each include a second secret used to secure 
communications between the third node and the second node, the method 
further comprising: operating the third node to generate an additional packet flow 
from the received packet flow directed to the second node and to forward the 
additional packet flow to the second node, packets in said additional packet flow 
having a source address corresponding to the third node and a destination 
address corresponding to the second node, said step of generating an additional 
packet flow including at least one of a group of security steps which use the 
second shared secret, the group of security steps consisting of: encrypting a 
packet, adding an integrity check for the contents of the packet, and adding an 
authenticator check for the packet sender (column 7 lines 49 - 61 and column 8 
lines 3- 16). 



Application/Control Number: 10/685,720 
Art Unit: 2436 



Page 17 



Regarding claim 17 , Srivastava discloses the method of claim 16, further 
comprising: operating the second node to communicate the first shared secret to 
the third node, the first shared secret being encrypted using the second shared 
secret (Figure 3 and column 1 1 lines 34 - 60). 

Regarding claim 18 , Srivastava discloses the method of claim 17, further 
comprising: mutually authenticating the second and third nodes prior to the 
second node transmitting the first shared secret to the third node (column 8 lines 
17-34). 

Srivastava is silent in explicitly disclosing a first, second and third node, 
however Belani provides support for the obvious modification of the 
disclosed multicast proxy service nodes to read upon the claimed multiple 
(first, second and third) nodes. Belani discloses in column 8 lines 31-60, 
the recitation, "a DAG may be represented by G(N, E) having node "N" 
and directed edges "E." FIG. 5 depicts an exemplary DAG having three 
nodes n.sub.i, n.sub.j, and n.sub.k." 

It would have been obvious for one of ordinary skill in the art, at the time of 
the invention to have been motivated to modify the invention of Srivastava 
with that of Belani. The basis/motivation for such modification is provided 
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by Belani, which recites in column 1 lines 64-67 and column 2 lines 1-18, 
"Advances in communication network technologies coupled with the 
explosive growth in the usage of computer systems have significantly 
increased the number of resources available to users via communications 
networks. Due to the rising popularity of such communications networks, 
an increasing number of enterprises are replacing their legacy centralized 
information processing models with distributed systems comprising a 
plurality of computer systems interconnected via a communication 
network, such as the Internet." 

Further, Srivastava implicitly provides support for the obvious modification 
by means of the disclosure in column 5 lines 7-13, which recites, 
"multicast proxy service nodes" and column 7 lines 10-20, which recites, 
"multiple entities, which themselves communicate over a secure back 
channel ... the entities, which make up the distributed group controller 
nodes and use the back channel to communicate among each other, use 
various key exchange algorithms to securely communicate." The 
disclosure here of "multiple proxy service nodes" provides partial support 
for the obviousness-type 103(a) rejection indicated below for this and the 
other claim limitations. 
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Regarding claim 22 , Srivastava discloses a communications system for use with 
a second node, said communications system comprising: a first node including: 
memory means for storing a first secret, said first secret being shared between 
the first node and the second node to secure communications between said first 
and second nodes; and means for establishing a secure communications session 
with said second node using the first shared secret to secure the contents of 
packets communicated from the first node that are directed to the second node 
as part of a secure communications session; a third node, coupled to said first 
and second nodes, the third node including: memory means for storing a copy of 
said first shared secret; and means for receiving a secure flow of packets from 
the first node that are directed to said second node as part of the secure 
communications session (figure 1 , column 2 lines 27 - 41 and column 9 lines 38 
-49). 

Regarding claim 23 , Srivastava discloses the communication system of claim 22, 
wherein said third node further includes: means for receiving from said second 
node the first shared secret; and means for storing the first shared secret in 
memory, said received first shared secret being encrypted using a second 
shared secret known to the second and third nodes (column 12 lines 24 - 55). 



Regarding claim 25, 40 , Srivastava discloses a method of operating a third node 
in a system comprising a first node, a second node and said third node, a first 
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secret being shared between the first and second nodes to secure 
communications between said first and second nodes, the method comprising: 
receiving from said second node the first shared secret; storing said first shared 
secret in memory; and receiving a secure flow of packets from the first node that 
are re-directed away from said second node to said third node said redirected 
packets being packets which were originally directed to said second node as part 
of the secure communications session (figure 1 , column 2 lines 27 - 41 and 
column 9 lines 38-49). 

Srivastava is silent in explicitly disclosing a first, second and third node, 
however Belani provides support for the obvious modification of the 
disclosed multicast proxy service nodes to read upon the claimed multiple 
(first, second and third) nodes. Belani discloses in column 8 lines 31-60, 
the recitation, "a DAG may be represented by G(N, E) having node "N" 
and directed edges "E." FIG. 5 depicts an exemplary DAG having three 
nodes n.sub.i, n.sub.j, and n.sub.k." 

It would have been obvious for one of ordinary skill in the art, at the time of 
the invention to have been motivated to modify the invention of Srivastava 
with that of Belani. The basis/motivation for such modification is provided 
by Belani, which recites in column 1 lines 64-67 and column 2 lines 1-18, 
"Advances in communication network technologies coupled with the 
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explosive growth in the usage of computer systems have significantly 
increased the number of resources available to users via communications 
networks. Due to the rising popularity of such communications networks, 
an increasing number of enterprises are replacing their legacy centralized 
information processing models with distributed systems comprising a 
plurality of computer systems interconnected via a communication 
network, such as the Internet." 

Further, Srivastava implicitly provides support for the obvious modification 
by means of the disclosure in column 5 lines 7-13, which recites, 
"multicast proxy service nodes" and column 7 lines 10-20, which recites, 
"multiple entities, which themselves communicate over a secure back 
channel ... the entities, which make up the distributed group controller 
nodes and use the back channel to communicate among each other, use 
various key exchange algorithms to securely communicate." The 
disclosure here of "multiple proxy service nodes" provides partial support 
for the obviousness-type 103(a) rejection indicated below for this and the 
other claim limitations. 

Regarding claim 42, 44 and 48, Srivastava discloses the method of claim 1 , 
wherein the second node destination address is a Home Address of the second 
node (column 2 lines 27 - 4). 
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Regarding claim 49 , Srivastava discloses the method of claim 47, further 
comprising: operating the third node to transmit another packet flow, said another 
packet flow including as a source address an address corresponding to the 
second node and including packets generated from said intercepted packets 
(column 7 lines 49 - 61 and column 8 lines 3-16). 



Conclusion 

5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to CHINWENDU C. OKORONKWO whose telephone 
number is (571 )272-2662. The examiner can normally be reached on MWF 2:30 - 6:00, 
TR 9:00-3:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami can be reached on (571) 272 4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 
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Patent Application Information Retrieval (PAIR) system. Status information for 
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For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
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